WO 2005/032908 PCT/US2004/031927 TITLE OF THE INVENTION METHOD AND SYSTEM FOR ENSURING THAT A TRAIN OPERATOR REMAINS ALERT DURING OPERATION OF THE TRAIN BACKGROUND OF THE INVENTION Field of the Invention The invention relates to wayside signaling generally and more particularly to wayside signal acknowledgment systems.
Discussion of the Background Trains are often controlled by wayside signaling systems. A wide variety of wayside signal systems are known in the art. In traditional wayside signaling systems Automated Block signaling (ABS) and Centralized Track Control (CTC) systems), one or more colored signal lights mounted on poles alongside a track are used to direct a train operator as to how to move the train. These wayside signals may be located at various positions on the railway such as near the beginning of a block of track and near grade crossings, sidings, switches, etc.
The signal lights indicate whether and under what conditions what speed) a train is to proceed in a section of track associated with the signal. The meaning of the wayside signal is sometimes referred to as the signal "aspect." As one simple example, a red signal indicates that a train cannot enter a section of track associated with a signal, a yellow signal indicates that the train can proceed through a section of track at a speed that will allow it to stop before entering the next section of track, and a green signal indicates that the train may proceed through a section of track at the maximum allowable speed. Other more complex WO 2005/032908 PCTIUS2004/031927 signaling systems are also known in the art. On some railroads, there are over 125 different colored light signal indications that must be recognized and obeyed.
An operator is required to observe the lights and operate the train accordingly. However, train operators are human and can sometimes miss a signal, which can result in disaster. A number of systems have been designed to address this problem, but each of these systems has drawbacks that make them unsuitable for some applications.
Several of these systems, sometimes referred to as communication-based train control (CBTC) systems, involve the communication of a signal information into the cab of a train. For example, in a prior art system referred to as the Cab Signal system, wayside signals are transmitted as alternating current signals from wayside signal equipment through the rails of the train track, where they are picked up by inductive coils mounted on the locomotive and displayed to the operator on a display located in the locomotive cab. The Cab Signal system forces the operator to acknowledge signals that are more restrictive than the current signal and, in some systems, will activate the train's brakes to stop the train if a signal is not obeyed. However, this system has several drawbacks. First, it requires the installation of expensive wayside equipment to transmit the signal to the locomotive cab through the rails.
Second, the system only requires acknowledgment of signals. Simply requiring acknowledgment of signals does not ensure that an operator is alert. It is known to those of skill in the art that operators can successfully acknowledge signals while in only a semi-conscious state referred to as "micro-sleep." Although some embodiments of the cab signal system will stop the train if a signal is not WO 2005/032908 PCTIUS2004/031927 obeyed, this after-the-fact response may not be sufficient to prevent an accident.
Furthermore, neither a semi-conscious crew member nor the cab signal system may respond to events such as a person or other obstruction on a train track for which the wayside signaling system does not provide a warning, whereas a fully alert crew member could take appropriate action in such an event.
Third, the cab signal system does not force an operator to acknowledge less restrictive signals. This is disadvantageous because if an operator misses a less restrictive signal, the operator may miss an opportunity to operate the train more efficiently by increasing the speed of the train.
Other systems involve the transmission of wayside signals to the cab of the train using radio-based communications. In these systems, signal information is broadcast to the cab of the train using radio frequency transmissions. Although the radio frequency communication equipment used in such systems is less expensive than the equipment used in the cab signal systems, it still increases costs, especially in a railroad in which a wayside signaling system is already in place.
There is a system described in U.S. Patent No. 6,112,142 (the contents of which are hereby incorporated by reference herein), which is owned by the assignee of the present invention, that does not require wayside communication equipment in addition to existing wayside signal equipment. In that system, an engineer and a trainman are each provided with a combined display/input device referred to therein as a pendant. When a train with such a system approaches a signal, both the engineer and the trainman must agree as to the signal aspect by pressing corresponding buttons on the pendant corresponding to the signal aspect.
If both the engineer and the trainman agree as to the signal aspect, the system will -3- -4- 0 automatically ensure compliance with the signal. If the engineer and the trainman do not 0 agree as to the signal aspect, or do not operate the train in compliance with the signal, the system will take corrective action to enforce the signal and/or stop the train. Some n embodiments of that system combine a global positioning system or inertial navigation system with a track database containing the locations of wayside signals to provide the train crew with a signal proximity warning and will stop the train if the train crew fails to O acknowledge this warning. While this system is advantageous in that it does not require 0 any equipment to transmit signals to trains in the system in addition to a wayside O0 signalling system, it has the drawback of requiring two crew members.
O
O What is needed is a system and method that overcomes or at least ameliorates deficiencies in known systems.
SUMMARY
An aspect of the present invention provides a method for promoting operator awareness during operation of a train comprising the steps of: determining when a train is near a wayside signal device; prompting an operator to enter a signal displayed on the wayside signal device; accepting a signal from the operator; taking corrective action if no signal is entered by the operator or if a signal entered by the operator is not a valid signal; and allowing the train to proceed without taking corrective action if the train is operated in compliance with the signal entered by the operator.
Another aspect of the present invention provides a train control system comprising: a controller located on a train; an input device connected to the controller, the input device being configured to accept a signal from an operator of the train and to provide the signal to the controller; a track database connected to the controller, the track database including a location of at least one wayside signal device; and a positioning system in communication with the controller, the positioning system being located on the train and being configured to provide a position of the train to the controller; wherein the controller is configured to perform the steps of: determining when a train is near the at least one wayside signal device based on a position of the train received from the positioning system and a location of the device received from the track database; prompting an operator to enter a signal displayed on the at least one wayside signal device; accepting a signal from the operator; taking corrective action if no signal is 4a 0 entered by the operator or if the signal entered by the operator is not a valid signal; and allowing the train to proceed if possible to do so in compliance with the signal accepted from the operator without communicating with the wayside signal device to determine if n the signal accepted from the operator matches the signal displayed on the at least one wayside signal device.
Another aspect of the present invention provides a method for promoting train 0 operator alertness comprising the steps of: prompting an operator to enter a first signal 00 Scorresponding to a wayside signal device; accepting the first signal on an input device from the operator, the input device including a plurality of buttons for entry of the signal; and rearranging the buttons.
Another aspect of the present invention provides a method for promoting train operator alertness comprising the steps of: prompting an operator to repeat a sequence, accepting a sequence from the operator, comparing the sequence from the operator to the sequence of the prompting step, and taking corrective action if the sequence from the operator does not match the sequence of the prompting step.
Another aspect of the present invention provides a train control system comprising: a controller located on a train; an input device connected to the controller, the input device being configured to accept a signal from an operator of the train and to provide the signal to the controller, the signal being entered by the operator using one of more of a plurality of buttons; a track database connected to the controller, the track database including a plurality of locations, each of the locations corresponding to one of a plurality of wayside signal devices; and a positioning system in communication with the controller, the positioning system being located on the train and being configured to provide a position of the train to the controller; a receiver connected to the controller, the receiver being configured to receive a signals from the wayside signal device; wherein the controller is configured to perform the steps of: determining when a train is near a wayside signal device based on a position of the train received from the positioning system and a location of the device received from the track database; prompting an operator to enter a signal displayed on the wayside signal device; receiving a first signal from the operator via the input device; receiving a second signal from the wayside signal device via the receiver; taking corrective action if the first signal does not match the 4b 0 second signal or if the train is not operated in compliance with the second signal; and rearranging the buttons after the first signal is received.
n Another aspect of the present invention provides a train control system comprising: a controller located on a train; an input device connected to the controller, the input device being configured to accept a signal from an operator of the train and to Sprovide the signal to the controller; a track database connected to the controller, the track 0 database including a plurality of locations, each of the locations corresponding to one of a 00 Splurality of wayside signal devices; and a positioning system in communication with the S io controller, the positioning system being located on the train and being configured to Oprovide a position of the train to the controller; a receiver connected to the controller, the receiver being configured to receive a signal from the wayside signal device; wherein the controller is configured to perform the steps of: determining when a train is near a wayside signal device based on a position of the train received from the positioning system and a location of the device received from the track database; prompting an operator to repeat a sequence when the train is near the wayside signal device; accepting a sequence from the operator via the input device; taking corrective action if the sequence from the operator is incorrect; prompting an operator to enter a signal displayed on the wayside signal device; receiving a first signal from the operator via the input device; receiving a second signal from the wayside signal device via the receiver; and taking corrective action if the first signal does not match the second signal.
Embodiments of the present invention provide a train control system that requires a train operator to enter signal aspect information at each wayside signal position on a railroad and that stops the train if the operator fails to enter aspect information. This is an improvement over systems in which the operator is only required to acknowledge the signal by pressing a general purpose acknowledgment button regardless of the meaning of the signal) because it ensures that the operator is alert and is not simply reflexively acknowledging the signal. In some embodiments of the invention, the signal aspect information is entered by the operator by pressing a button corresponding to the signal aspect information, and the location of the button is changed. In other WO 2005/032908 PCTIUS2004/031927 embodiments of the invention, the operator must repeat a varying sequence (such as a series of button pushes) in conjunction with or in addition to entering signal aspect information.
In preferred embodiments of the invention, the system includes a controller, a track database including the positions of all signals in a system, a positioning system that supplies the controller with a position of the train, and an input device that an operator uses to enter signal aspect information. The controller determines when the train is approaching a wayside signal based on the information from the positioning system and the track database. The controller will wait for and, if necessary, warn the operator to enter, signal aspect information for the approaching signal. If the operator fails to enter any information within a timeout period, the controller takes corrective action. In some embodiments, the corrective action comprises activating a warning device and/or activating the train's brakes to stop the train. If the operator enters signal aspect information, the processor will ensure that the train is operated in compliance with the signal and will take corrective action if the operator attempts to operate the train in a noncompliant manner.
In some embodiments, the controller dynamically determines the amount of time necessary to stop the train based on the train's speed, weight, and other factors and sets the timeout period accordingly. In other embodiments, the timeout period is predetermined based on a worst-case assumption fastest possible speed, greatest weight, steepest downhill grade of track, etc.) of the time required to stop the train. If the operator fails to enter a matching signal within the timeout period, corrective action is taken.
WO 2005/032908 PCTIUS2004/031927 BRIEF DESCRIPTION OF THIE DRAWINGS A more complete appreciation of the invention and many of the attendant features and advantages thereof will be readily obtained as the same become better understood by reference to the following detailed description when considered in connection with the accompanying drawings, wherein: Figure 1 is a block diagram of one embodiment of the invention.
Figure 2 is a front view of a pendant of the embodiment of Figure 1.
Figure 3 is a flow chart illustrating operation of the system of Figure 1.
Figures 4(a) and are front views of a pendant with changeable buttons according to a second embodiment of the invention.
Figure 5 is a front view of a pendant according to a third embodiment of the invention.
DETAILED DESCRIPTION The present invention will be discussed with reference to preferred embodiments of train control systems. Specific details, such as types of signals, are set forth in order to provide a thorough understanding of the present invention.
The preferred embodiments discussed herein should not be understood to limit the invention. Furthermore, for ease of understanding, certain method steps are delineated as separate steps; however, these steps should not be construed as necessarily distinct nor order dependent in their performance.
A train control system 100 is illustrated in Fig. 1. The system 100 includes a controller 110. The controller 110 may be a microprocessor or may be WO 2005/032908 PCT/US2004/031927 implemented using discrete components. The controller 110 is responsible for implementing the logical operations discussed in detail below.
An operator pendant 120 is connected to the controller 110. The operator pendant 120 is illustrated in further detail in Figure 2. The operator pendant 120 includes a display panel 121 and a signal entry panel 230. Although these panels 121, 130 are illustrated as separate, they are also combined in some embodiments of the invention. The signal entry panel 230 includes a series of 12 buttons 231- 242 labeled as 1 CLR (clear), 2 LTD (limited), 3 APP (approach), 4 MED (mcdium), 5 DIV (diverging), 6 SLOW, 7 ADV (advance), 8 RES (restricted), 9 STOP/PROC (1 push stop, 2 pushes proceed), 10 COND O'RIDE (conditional override), 11 ACK/ENTER (acknowledge/enter depends upon context); and 12 CANCEL, respectively. Buttons 231-240 correspond to various signals defined in the GCOR (General Code of Operational Rules) and various other signaling systems used in the United States. The ACK/ENTER and CANCEL buttons 241 and 242 are used to acknowledge warnings, enter information, and cancel a previous entry, respectively.
The buttons 231-242 are used by the operator to enter a signal displayed on a wayside signaling device. For example, if the wayside signal device displayed a "medium approach medium" signal (which means that the train is allowed to travel at medium speed through turnouts, crossovers, sidings and over power operated switches, then proceed, approaching the next signal at a speed not exceeding the medium speed), the operator would depress the MED button 234, the APP button 233, and the MED button 234 in that order.
WO 2005/032908 PCTIUS2004/031927 The pendant 120 also includes a display panel 121 with a window 210, which is preferably a graphics-capable display (a liquid crystal display is illustrated in Fig.
2, but any graphics display could be used). The window 210 includes a current speed field 211, a maximum speed field 212, an acceleration field 213 (which indicates what the speed of the train will be in one minute at the current acceleration), a signal field 214 (which illustrates the distance in feet to the next signal and the status of that signal), a milepost field 215, an EOT field 216 indicating whether or not the EOT unit is armed (signifying whether or not the EOT unit can provide an emergency braking operation), a track warranty field 217 indicating the distance in miles to the end of the current track warrant, an elevation profile window 218, a track curvature window 219, and a braking curve window 220. The window 210 also displays, in window 221, messages received from the dispatcher and, in window 222, track configuration and status information, including a display of other trains train M122 in Figure The buttons surrounding the window 210 are "soft keys" that have different, programmable functions, which are beyond the scope of the present invention, depending on the content of the display 210 in a manner well known in the art.
In embodiments of the invention in which the signal entered by the operator is displayed, the signal may be displayed in a "pop-up" window in the window 210.
In other embodiments, the signal may only be displayed in the signal field 214 as discussed above. In other embodiments, no visual indication of the signal device 200 is provided on the pendant 120.
Referring now back to Fig. 1, also connected to the controller 110 is a positioning system 130. The positioning system 130 is a GPS receiver in preferred -8- WO 2005/032908 PCT/US2004/031927 embodiments. The GPS receiver can be of any type, including a differential GPS, or DGPS, receiver. Other types of positioning systems 130, such as inertial navigation systems (INSs), Loran systems, and wheel tachometers can also be used.
Such positioning systems are well known in the art and will not be discussed in further detail herein. (As used herein, the term "positioning system" refers to the portion of a positioning system that is commonly located on a mobile vehicle, which may or may not comprise the entire system. Thus, for example, in connection with a global positioning system, the term "positioning system" as used herein refers to a GPS receiver and does not include the satellites that are used to transmit information to the GPS receiver.) The positioning system 130 continuously supplies the controller 110 with position information for the train to which the system 100 is attached. This position information allows the controller 110 to determine where the train is at any time. The positioning system 130 is preferably sufficiently accurate to unambiguously determine which of two adjacent tracks a train is on. By using train position information obtained from the positioning system 130 as an index into a track database 140 (discussed in further detail below), the controller 110 can determine the train's position'relative to wayside signal devices 200 in the railroad.
A track database 140 is also connected to the controller 110. The track database 140 preferably comprises a non-volatile memory such as a hard disk, flash memory, CD-ROM or other storage device, on which track data and the locations of wayside signal devices is stored. Other types of memory, including volatile memory, may also be used. The track data preferably also includes positions of switches, grade crossings, stations and anything else of which an operator is -9- WO 2005/032908 PCTIUS2004/031927 required to or should be cognizant. The track data preferably also includes information concerning the direction and grade of the track.
A brake interface 150 connected to the controller 110 allows the controller 110 to activate and control the train brakes when necessary to slow and/or stop the train. Brake interfaces are well known in the art and will not be discussed in further detail herein.
Finally, some embodiments of the invention include a warning device 160 separate from the pendant 120. The warning device 160 may be a light or an audible device such as a bell or horn that will get the operator's attention if he is not looking in the direction of the pendant 120.
A flowchart 300 illustrating operation of the system 100 is shown in Fig. 3.
The process starts with the controller 110 querying the positioning system 130 to determine the position of the train at step 302. The controller 110 then consults the track database 140 to determine the nearest approaching signaling device 200 based on the train's position at step 304. Next, the controller 110 determines whether the signaling device 200 is within an expected visual range at step 306.
The expected visual range is a fixed threshold based on a distance at which an operator with normal vision can be expected to see a signal on a clear day. Of course, any particular signal on any particular day may actually be visible at a different distance. The expected visual range is simply a distance chosen so that the operator is prompted at a reasonable distance from the signal, to avoid prompting the operator at a distance so far away that it would be impossible for the operator to see the signal, while at the same time being far enough away to allow the operator sufficient time to enter the signal before corrective action is taken.
WO 2005/032908 PCT/US2004/031927 If the nearest device is not within visual range, steps 302 and 304 are repeated until the next signaling device 200 is within visual range. When the next device 200 is within visual range at step 306, the controller 110 then determines at step 308 a timeout within which a signal must be received from the device 200 and a matching signal must be received from the operator's pendant 120. The timeout is chosen such that, at the expiration of the timeout, there will be sufficient distance and time in which to stop the train in the event of a problem no signal is entered by the operator or the signal entered by operator does not match the signal received from the device).
The timeout is dynamically determined in some embodiments using factors such as the speed and weight of the train, the distance between the train and the upcoming signaling device 200, the grade of the upcoming section of track, the distribution of weight on the train, and/or the characteristics of the braking system on the train in a manner well known in the art. In other embodiments, the timeout is a fixed period based upon a worst-case assumption about the distance required Next, at step 310, the controller 110 prompts the operator (which can be done using a pop-up window on the pendant 120 and/or by activating the warning device 160) to enter the signal aspect from the approaching signal device identified at step 304. If the operator enters a signal before the expiration of the timeout at step 312, the controller determines if the entered signal is valid for the railway on which the train is located. If the signal is not valid at step 314 and if the timeout has not yet expired at step 316, steps 310 et seq. are repeated. If the timeout has expired at step 316, corrective action (as described further below) is taken at step 330.
-11- WO 2005/032908 PCTIUS2004/031927 If the controller determines that a valid signal has been entered at step 314, the controller monitors the train to ensure that it is in compliance with the signal at step 318. In most instances, compliance with the signal is determined by monitoring the train's speed, which can be done using inputs from the positioning system 130, a wheel tachometer, or any other means available to the controller 110.
If the train is in compliance with the signal at step 320, the controller 110 obtains an updated train position from the positioning system 130 at step 322. If the train has not yet passed the area corresponding to the signal a block of track in an ABS system) at step 324, steps 318 et seq. are repeated. If the train has passed the area corresponding to the signal at step 324, steps 302 et seq. are repeated.
If the train is not in compliance with the signal at step 320, a warning device 160 is activated at step 326. As discussed above, the warning device 160 may form part of the pendant 120 or may be a separate device such as a horn or buzzer. After the warning device has been activated, and after waiting an amount of time to allow the operator to take action to bring the train in compliance with the signal if it is safe to do so, the controller 110 again determines if the train is in compliance with the signal at step 328. If the train is in compliance, steps 324 et seq. are repeated. If the train is still not in compliance with the signal at step 328, corrective action is taken at step 330.
The corrective action at step 330 may take a variety of forms. In some embodiments, the controller 110 may activate the brakes of the train through the brake interface 150 such that the train is brought to a stop. At this point, some enbodiments of the system require authorization from a dispatcher in order to start the train moving again. Other embodiments require the operator to perform a start -12- WO 2005/032908 PCTIUS2004/031927 up procedure. Yet other embodiments simply allow further movements after the stop on the basis that such further movements require active participation of the operator. In other embodiments, the controller 110 may activate the brakes such that the speed of the train is reduced to either the speed allowed in the block and/or a required speed as calculated for a braking curve based on one or more of the following factors: the weight, speed and position of the train, the distribution of weight on the train, and the grade of the track. Braking curves and their associated calculations are well known in the art and will not be discussed in further detail herein. The corrective action may also include notifying a dispatcher in embodiments that provide for communication between the system 100 and a dispatcher.
In some embodiments, the system 100 will become "active" anytime any switch button is used or anytime the speed of the locomotive is greater than mph. These features make the system unobtrusive during railyard switching operations. Also, when speed increases above 15 mph the system 100 will require an initial acknowledgment by the operator. After this initial acknowledgment the system will require operator acknowledgments at set intervals mandatorily such as one hour between pendant activity as long as the train speed is above 15 mph and no signal button has been depressed in the last hour. In the event that speed is reduced to a "stop" and then increased to greater than 15 mph without any intervening button operation, the system will "force" an acknowledgment to further check the system100 and the operator's actions.
As discussed above, compliance with the signal from the wayside signaling device 200 is monitored at step 320. An example of non-compliance is if the speed -13- WO 2005/032908 PCT/US2004/031927 of the train exceeds the "target" speed for a given signal by a prescribed speed over the target speed and the train is not decelerating, at a target deceleration amount 1 mph/min). In some embodiments, if an initial determination of noncompliance is made, a response timer will be set and automatic braking will occur upon timeout of the response timer unless the speed of the train is reduced to less than 5 mph above the "target speed"; the train is decelerating at an acceptable rate; or the speed of the train is brought below the "target speed".
In order to further ensure that an operator is alert, some embodiments of the invention employ an operator pendant 120 on which the position of the buttons by which the operator enters signal aspect information is modified. The buttons may be changed each time an operator enters signal aspect information, periodically, or on some other basis.
A pendant 420 for use in such an embodiment is illustrated in Fig. 4(a) and The pendant 420 preferably comprises a touch screen 422 with reprogrammable buttons 424 in a manner well known in the art.
The screen view of Fig. 4(a) is displayed to the operator when the controller 110 determines that the train is within visual range of a wayside signal device. The screen view of Fig. 4(a) includes a prompt to the operator to enter signal information and four buttons 424a-d labeled clear, approach, medium, and stop, respectively. This configuration is used in connection with a wayside signaling system in which all signals are formed using only these four aspects. Additional buttons 424 with other aspects (such as the additional aspects shown in Fig. 2) are used in embodiments with more than four aspects. The operator enters the aspect information by touching the buttons 424. For example, for an "approach medium" WO 2005/032908 PCTIUS2004/031927 signal, the operator would press the "approach" and "medium" buttons 424b and 424c. Alternatively, for a clear signal, the operator would simply press the clear button 424a.
In the examples discussed above, it should be recognized that it is possible for an operator to fool the system 100 by entering a clear signal pressing the clear button 424a) regardless of what signal is displayed by the wayside signal device 200. If such an operator were to make a habit of fooling the system 100 in this manner, there is a possibility that the operator may develop a reflex reaction that will allow him to continually hit the clear button 424a when prompted to enter a signal. In a worst-case situation, such a reflex reaction might allow the operator to enter a state of micro-sleep while successfully entering signals. In order to prevent this, it is preferable to change the position of the buttons 424 on the pendant 420.
For example, after an operator enters a signal with the pendant 420 configured as shown in Fig. the location of the buttons 424 may be re-arranged as illustrated in Fig. 4(b) when the operator is prompted to enter a signal at the next wayside device 200. In this manner, if the operator reflexively presses the same button in the upper left-hand corner of the pendant 420 a second time, a "stop," will be entered, which will be enforced by the controller 110 by automatically activating the brakes of the train to bring it to a halt.
The buttons 424 of the pendant 420 may be rearranged at random times, at some multiple of the number of signals entered by the operator, periodically at the one hour intervals discussed above), or any other basis; but is rearranged each time an operator enters a signal in preferred embodiments. Also, the manner in which the signals are rearranged may also be varied. For example, in some WO 2005/032908 PCTIUS2004/031927 embodiments, the stop button replaces whatever button was last used by the operator. It is also possible to randomly rearrange the buttons, or to rearrange them on other bases. Furthermore, in the example used above, the buttons 424 are always arranged at the same locations although the order in which the buttons are placed in those locations changes. In other embodiments, the locations of the buttons may also change such that a particular location on a screen is sometimes within a first button, sometimes within another button, and sometimes not within any button. This prevents an operator from being able to enter signal information by simply pressing the same area of the display over and over in response to prompts to enter signal information. In such embodiments, a smaller button size as compared to what is shown in Figs. 4(a) and is preferable.
Another technique that can be used to guard against operator inattentiveness is to repeatedly require an operator to repeat a time-varying sequence. The time varying sequence may comprise a plurality of button pushes. A display 520 useful in such an embodiment is illustrated in Figure 5. The display 520 includes a plurality of buttons 524a-d labeled A, B, C, D, respectively. In one embodiment, the buttons 524 are successively illuminated in a varying sequence BCDA one time, ABDC the next time, etc.) and the operator is required to repeat the sequence by pressing the buttons 524 in the same order in a manner similar to the popular electronic game SIMON', available from Milton Bradley. In other embodiments, the operator may be asked to repeat the same sequence each time, but the location of the buttons changes in the manner similar to that described above in connection with Figures 4(a) and 4(b).
-16- WO 2005/032908 PCTIUS2004/031927 The operator may be asked to repeat a sequence each time a signal is to be entered. Additionally or in lieu of requiring the operator to mimic the sequence when entering a signal, the operator may be required to repeat the sequence periodically at the one hour intervals described above) or at random times.
The consequence of a failure to correctly repeat a sequence can also vary. In some embodiments, a failure to correctly repeat the sequence results in the controller 110 activating the brakes to stop the train. In other embodiments, the operator is given a second opportunity to correctly enter the sequence if time is available to do so safely. Other consequences are also possible.
In the embodiments described above, the pendants 420, 520 may be physically separate from the pendant 120 of Fig. 2. Alternatively, the pendants 420, 520 may be incorporated into the pendant 120 of Fig. 2. In one embodiment, the pendant 420 or 520 replaces the window 210 of the pendant 120 of Fig. 2. In yet other embodiments, the window 210 together with the soft keys 210 are used to implement the techniques discussed above in connection with the touch screen pendants 420, 520.
For example, the window 210 of the pendant 120 may display a scene similar to that of Fig. with each of the buttons 424a-d of Fig. 4(a) being associated one of the soft keys surrounding the window 210 on pendant 120. The association may be made on the basis of physical proximity of a button 424a-d to a nearest soft key, in which the rearrangement of the buttons 424a-d in the window 210 would result in a change the association between individual soft keys and buttons 424a-d.
Alternatively, each of the soft keys may have a number permanently associated with it, and that number of a corresponding soft key may be displayed on the -17- WO 2005/032908 PCTIUS2004/031927 buttons 424a-d. In such embodiments, the rearrangement of buttons may be accomplished by changing the soft key number displayed on the buttons 424a-d in lieu of or in addition to changing the location of the buttons 424a-d. Other variations on this technique are also possible. Similar techniques may be utilized to require the operator to press different sequences of oft keys to implement the varying sequence technique discussed above in connection with Fig. It should be noted that the techniques described in connection with Figs. 4(a), 4(b) and 5 may be used in a wide variety of settings, including systems in which communications with wayside signaling devices occurs, such as the system described in U.S. Patent Application Serial No. 10/300,852, filed November 21, 2002 and entitled "Improved Positive Signal Comparator and Method" (the 852 application"), the contents of which are hereby incorporated by reference herein.
For example, at step 316 of the method described in Fig. 3 of the '852 application, the operator is prompted to enter a signal corresponding to a signal received from a wayside signaling device via a transceiver located on the train. This step 316 may be performed using one of the techniques described in connection with Figs. 4(a), 4(b) and 5 of this application. In such an embodiment, the signal received from the wayside signaling device is compared to the signal entered by the operator and corrective action is taken if the signals do not match.
In addition to ensuring compliance with wayside signaling devices 200, the system 100 may also ensure compliance with "slow order" or speed restriction information for the territory to be traversed by the train. In such embodiments, "slow order"/speed restriction information is stored in the database 140 and is treated in a manner similar to signals from wayside devices 200 when the WO 2005/032908 PCTIUS2004/031927 train approaches the start of a section of track covered by a slow order or speed restriction, the slow order/speed restriction information is displayed to an operator on the pendant 120 in a "pop up" window, and the controller 110 takes corrective action if the slow order/speed restriction is not complied with.) Several methods for updating the "slow order"/speed restriction information are available including: A. Operator Update: The train crew must "sign up" before boarding the train. The operator can be given a credit card sized memory device or some similar device having the latest track information at the "sign up" location. After receiving this data, a crewman can board the train and read this latest data into the database 140.
B. Radio Update: At prescribed railroad locations, a low power transmitter can be employed to automatically update the database 140. Employing radio communications to update the database 140 does not necessarily vitiate one of the advantages of the invention discussed above; namely, the ability to employ the system as a "retrofit" to a railroad with an existing visual wayside signaling system. This is because it is possible to use the radio update feature with a radio communications system that covers only limited areas of the system such that the databases of trains on the system become updated when they travel on such limited areas. Furthermore, it should be noted that the invention is not limited to use in a retrofit context and that not all embodiments of the invention necessarily include this or any other advantage discussed herein.
C. Computer Update: WO 2005/032908 PCT/US2004/031927 During mechanical inspections, a laptop or other memory device could be used to update the database 140. In such embodiments, the pendant 120 preferably displays the date the system was last updated so the crew can verify that they have the latest data.
While the invention has been described with respect to certain specific embodiments, it will be appreciated that many modifications and changes may be made by those skilled in the art without departing from the spirit of the invention.
It is intended therefore, by the appended claims to cover all such modifications and changes as fall within the true spirit and scope of the invention.